$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: EykGlcNOLKpH8dQDK/J+oIu5Fhd78uaDgX9+NyY+VYo= Subject key identifier: B7:EF:A2:1D:C8:81:FF:01:E3:3F:49:FB:E6:5F:15:B8:1B:3F:8C:0F Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 66C64949E4E4B7A8DF8AB80334242F06A0B9278B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01DB Signing time: Mon 20 Oct 2025 06:51:19 +0000 Manifest this update: Mon 20 Oct 2025 06:46:19 +0000 Manifest next update: Thu 23 Oct 2025 10:34:19 +0000 Files and hashes: 1: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 2: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) 3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 4: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: JD84Ang7ZmrUQg1OGplv1bFEFaVLJ1z481E4yWux1zw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:49:49:e4:e4:b7:a8:df:8a:b8:03:34:24:2f:06:a0:b9:27:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Oct 20 06:46:19 2025 GMT Not After : Oct 23 10:34:19 2025 GMT Subject: CN=B7EFA21DC881FF01E33F49FBE65F15B81B3F8C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:e9:d9:f8:f0:97:d2:5c:24:e8:d1:19:d3: f1:1b:50:44:5b:8b:9b:3f:35:2e:7c:55:01:80:14: bd:27:02:16:ab:64:1d:a4:6c:d1:95:bb:9e:56:d4: 7f:22:7e:d5:1a:34:dc:c9:af:4f:89:35:0c:3b:02: cf:f4:fe:62:35:ee:28:d1:c9:1c:b6:df:e1:08:a8: 39:a3:63:b1:7a:49:08:9b:3d:25:2c:1a:df:45:15: 71:56:d5:31:7a:d1:b0:a5:75:eb:39:c4:3a:99:bc: 06:ad:83:53:b1:fe:6e:55:da:9d:92:25:b4:90:52: f8:11:cf:6e:24:bd:48:42:e3:23:c8:ca:81:0e:6a: ed:12:7f:6d:7a:6b:b3:36:df:c0:1f:1f:b3:2a:02: cf:87:7a:c7:89:c2:fa:38:db:01:46:3f:99:59:55: 8c:f4:6c:12:ea:f6:15:26:20:e1:d1:9e:70:f4:9f: 1f:d0:43:9a:1c:a9:7c:88:6a:27:58:45:1e:20:a7: 6c:9b:41:6c:c7:bb:ee:be:6b:fe:7b:9f:53:43:c1: 51:7e:b3:ab:18:61:00:4b:66:7f:76:f5:12:ac:ca: 98:ff:4c:4d:35:c7:19:64:78:6e:12:fe:91:2f:44: b6:aa:fc:59:b8:a9:ce:e8:7f:0d:f0:18:64:b4:08: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EF:A2:1D:C8:81:FF:01:E3:3F:49:FB:E6:5F:15:B8:1B:3F:8C:0F X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:20:ce:b4:fe:11:9d:cf:3d:e2:64:4e:e0:8b:90:51:dd:01: 47:17:32:01:0f:41:3d:e5:90:12:2d:68:dc:63:1c:d9:27:5f: 59:88:b7:f2:e2:81:68:68:56:02:7c:7a:bb:45:56:0f:85:2c: a7:f9:30:9e:19:0b:27:ce:d3:9c:92:b9:26:a0:71:12:4f:83: 9a:6b:41:8e:5c:db:90:ff:01:33:08:4c:2f:92:88:41:de:09: 8a:dd:d4:0e:ba:7d:aa:81:d3:17:00:2e:db:cb:45:26:7d:be: 9e:e5:37:e4:f2:0b:bb:2f:b0:a5:97:1b:45:ae:8d:80:e0:69: 83:d5:2d:01:50:f3:d3:c0:c3:02:6f:42:df:d6:c5:30:5f:3a: 0a:a2:5a:07:1b:4b:e0:fc:ed:5a:15:9b:57:75:6f:16:14:27: d9:a8:09:d7:37:95:25:26:26:9e:6a:46:31:3a:0d:30:0b:76: 89:e4:06:00:ce:1f:e4:ef:4f:9e:fd:e6:21:13:4e:8c:51:61: 40:e2:2d:6d:ab:9b:d3:04:ee:ef:d3:3f:ee:bc:63:49:46:dd: d8:98:4b:64:2a:a0:61:1a:eb:e4:fd:c7:0c:f2:98:57:94:54: b5:f8:70:7e:95:8b:80:f8:17:2e:f0:79:f5:bb:c6:3e:f7:5f: cf:7b:19:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsZJSeTkt6jfirgDNCQvBqC5J4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTEwMjAwNjQ2MTlaFw0yNTEwMjMxMDM0MTlaMDMxMTAvBgNV BAMTKEI3RUZBMjFEQzg4MUZGMDFFMzNGNDlGQkU2NUYxNUI4MUIzRjhDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEy+nZ+PCX0lwk6NEZ0/EbUERb i5s/NS58VQGAFL0nAharZB2kbNGVu55W1H8iftUaNNzJr0+JNQw7As/0/mI17ijR yRy23+EIqDmjY7F6SQibPSUsGt9FFXFW1TF60bCldes5xDqZvAatg1Ox/m5V2p2S JbSQUvgRz24kvUhC4yPIyoEOau0Sf216a7M238AfH7MqAs+HeseJwvo42wFGP5lZ VYz0bBLq9hUmIOHRnnD0nx/QQ5ocqXyIaidYRR4gp2ybQWzHu+6+a/57n1NDwVF+ s6sYYQBLZn929RKsypj/TE01xxlkeG4S/pEvRLaq/Fm4qc7ofw3wGGS0CPgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt++iHciB/wHjP0n75l8VuBs/jA8wHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEgzrT+EZ3PPeJkTuCLkFHdAUcXMgEPQT3l kBItaNxjHNknX1mIt/LigWhoVgJ8ertFVg+FLKf5MJ4ZCyfO05ySuSagcRJPg5pr QY5c25D/ATMITC+SiEHeCYrd1A66faqB0xcALtvLRSZ9vp7lN+TyC7svsKWXG0Wu jYDgaYPVLQFQ89PAwwJvQt/WxTBfOgqiWgcbS+D87VoVm1d1bxYUJ9moCdc3lSUm Jp5qRjE6DTALdonkBgDOH+TvT5795iETToxRYUDiLW2rm9ME7u/TP+68Y0lG3diY S2QqoGEa6+T9xwzymFeUVLX4cH6Vi4D4Fy7wefW7xj73X897Gec= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:27 2025 by rpki-client